Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
File: DW3GbMOENrasMel-cS0hlAfIPPQ.mft (raw, json)
Hash identifier: dMZu2GIskF1XK1OPSOk6Y+Ya6SIGrgPod65rPWTT5c0=
Subject key identifier: A7:86:74:A6:EA:4E:B4:68:89:6E:15:ED:EC:5B:71:8E:A4:B7:C2:EC
Authority key identifier: 0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4
Certificate issuer: /CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4
Certificate serial: 019E1CE20D0923B83C2F6F06BCFC1CC0EC3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
Manifest number: 0789
Signing time: Tue 12 May 2026 15:50:36 +0000
Manifest this update: Tue 12 May 2026 15:50:36 +0000
Manifest next update: Wed 13 May 2026 15:50:36 +0000
Files and hashes: 1: DW3GbMOENrasMel-cS0hlAfIPPQ.crl (hash: OWug8kD0WD3otY51RN0STlYo2mtrmc2JixoE8GVNZRU=)
2: d0uZV4R2ZgcihJhZxxbOzJmT7aA.asa (hash: hiLRbd8efXwY4y/uVjZMI1vjDCS3VzxgU7eclUwARa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:e2:0d:09:23:b8:3c:2f:6f:06:bc:fc:1c:c0:ec:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4
Validity
Not Before: May 12 15:50:36 2026 GMT
Not After : May 13 15:50:36 2026 GMT
Subject: CN=a78674a6ea4eb468896e15edec5b718ea4b7c2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6f:8b:71:95:e1:ed:c3:d8:52:1a:a1:8a:80:
da:e0:01:df:ea:27:26:58:38:06:f3:7e:13:7d:6c:
c0:f3:dc:07:0b:8c:a3:b1:12:e1:38:20:ad:07:20:
a0:9b:c7:31:61:95:c1:99:90:b1:da:5b:45:be:00:
e8:0f:8a:56:2c:ed:ac:11:51:d9:b0:eb:32:07:e4:
a1:58:9c:f1:8c:17:41:6f:f8:fc:69:c8:12:ef:47:
fa:db:a8:82:07:b1:04:d1:eb:98:51:35:ca:d5:4b:
7e:9d:4d:17:ea:0e:4c:b6:20:d4:9b:36:9e:2c:ed:
31:0d:ce:c1:92:23:8e:c5:84:34:5e:eb:0f:ac:26:
bb:5c:a0:7b:21:84:4c:b7:11:20:fd:87:f5:4f:37:
fd:f3:0c:44:6b:75:42:44:36:83:6e:ae:33:e8:6f:
9a:1a:56:55:9d:8e:fb:9b:51:7d:c7:ae:f7:56:70:
f6:e7:8a:37:9e:83:f1:07:e9:6a:f5:bf:a8:3e:fb:
70:bd:fd:fa:ac:90:c9:db:f6:f2:ad:d6:46:8f:6e:
90:6f:ef:d1:ae:b8:25:d5:39:55:b5:54:09:1b:6b:
b8:ff:68:11:fb:7a:c6:ee:6d:7e:7e:15:d1:7d:b2:
6d:da:97:17:0e:52:9d:a6:ff:34:ab:d0:f8:5c:0e:
1e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:86:74:A6:EA:4E:B4:68:89:6E:15:ED:EC:5B:71:8E:A4:B7:C2:EC
X509v3 Authority Key Identifier:
keyid:0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ae:05:d1:61:53:eb:bd:57:6c:27:9d:32:62:06:b1:7b:29:
4c:4b:d8:3d:30:37:47:6a:0b:ba:f6:5d:23:b4:be:64:71:f2:
4c:7e:eb:b0:37:87:4a:7c:6e:42:d1:2d:b1:0d:4c:ff:45:2d:
82:1b:92:18:06:b1:4a:65:14:06:de:28:4f:38:2d:fd:c1:1b:
dc:9f:28:f0:75:a4:98:18:8a:88:3b:de:a4:35:90:f4:16:4a:
83:75:83:43:0c:f3:62:31:5c:41:bd:1d:ad:47:89:84:f9:21:
eb:2b:55:82:c8:aa:3f:f3:06:00:82:89:5f:71:7d:a6:2a:db:
c1:64:9d:8f:3c:a1:8d:86:c2:6b:f6:37:33:a1:b8:ad:0a:f4:
b7:9d:46:ef:8f:2d:37:80:ef:f7:12:0a:4d:7f:b4:c9:3d:34:
7d:1e:97:72:ef:75:bd:e4:fb:0a:91:09:49:e4:dc:79:26:6f:
79:4b:5b:c3:65:f8:9a:41:c8:30:03:36:43:78:78:61:0d:fa:
66:68:7e:23:56:69:3e:b9:25:bc:57:c8:b5:48:f3:36:66:70:
19:82:36:1e:9d:c1:91:06:3d:75:73:89:c8:7f:bf:de:09:71:
69:6c:69:48:2c:fa:fc:34:87:3b:15:39:5a:1b:32:22:03:f0:
4b:83:ee:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:36:39 2026 by rpki-client